Senior Infrastructure Engineer

Enterprise Vulnerability and Patch Management Lead Leads enterprise vulnerability and patch management activities that reduce technology risk and improve security posture across infrastructure and application environments. Applies advanced knowledge of vulnerability management principles, risk analysis, remediation governance, compliance requirements, and operational processes to drive timely remediation, support regulatory obligations, and improve overall security outcomes. Works independently with significant latitude for decision-making and serves as a key advisor to technology, cybersecurity, risk, and audit stakeholders. Essential duties and responsibilities following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time. Analyze vulnerability assessment results, security advisories, and vendor notifications to identify remediation requirements and develop technical mitigation strategies. Lead the remediation of complex infrastructure vulnerabilities by coordinating with technology teams to implement patches, configuration changes, upgrades, and compensating controls. Analyze vulnerability assessment results, threat intelligence, vendor advisories, and security findings to determine remediation requirements, risk exposure, and mitigation strategies. Conduct root cause analysis for recurring vulnerabilities, remediation failures, and patching gaps, and recommend process improvements to reduce future risk exposure. Support the development, implementation, and continuous improvement of patch management and vulnerability management procedures, standards, and operational processes. Develop and maintain automation solutions that improve vulnerability remediation, compliance validation, reporting, and operational efficiency. Perform infrastructure hardening activities and implement security baseline configurations to reduce attack surfaces and ensure alignment with enterprise security standards. Troubleshoot and resolve complex patching, deployment, system performance, and vulnerability remediation issues affecting infrastructure availability and security. Monitor infrastructure vulnerabilities, patch compliance, vulnerability exposure, and remediation effectiveness through dashboards, reporting tools, and operational metrics. Review and validate remediation activities to ensure vulnerabilities are properly addressed, documented, and compliant with established service-level commitments. Collaborate with cybersecurity, platform engineering, application support, and technology operations teams to prioritize and remediate critical and high-risk vulnerabilities. Support audit, risk, compliance, and regulatory activities by providing technical evidence, remediation documentation, and subject matter expertise related to patch and vulnerability management controls. Assess emerging technologies, security threats, and infrastructure vulnerabilities to develop proactive remediation strategies and improve security resilience. Create and maintain technical documentation, implementation procedures, runbooks, and knowledge articles to support operational consistency. Participate in incident response, problem management, and root cause analysis efforts related to infrastructure vulnerabilities, security events, and patch management failures. Provide technical leadership and mentoring to infrastructure engineers and technical teams while serving as a subject matter expert in patch management, vulnerability remediation, and infrastructure security. Continuously identify opportunities to improve patch deployment success rates, remediation timelines, vulnerability reduction, and overall infrastructure security posture. Qualifications Required Qualifications The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Bachelor's degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience. Minimum of 7 years of professional experience in infrastructure engineering. Advanced knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware. Preferred Qualifications Advanced expertise in ServiceNow Vulnerability Response (VR), including dashboard development, performance analytics, KPI/KRI design, remediation tracking, and executive-level reporting. Experience designing and governing enterprise vulnerability management reporting frameworks within ServiceNow VR to measure SLA attainment, remediation effectiveness, risk reduction, and program performance. Proven ability to develop and present complex vulnerability and remediation metrics through dashboards and reporting that support operational decision-making, governance activities, audit readiness, and executive oversight. Experience identifying opportunities to enhance ServiceNow VR reporting, workflows, integrations, and data quality to improve visibility, automation, and program effectiveness. 5+ years of experience in vulnerability management, patch management, infrastructure engineering, cybersecurity, technology risk management, or related disciplines. Advanced experience leading enterprise patch and vulnerability management programs across multiple technology domains. Extensive experience with vulnerability management platforms, including, Qualys, Rapid7, Wiz, Prisma Cloud, or equivalent solutions. Strong understanding of vulnerability prioritization methodologies, threat intelligence, risk-based remediation practices, and security exposure management. Experience developing and governing enterprise vulnerability management standards, procedures, controls, and operating models. Demonstrated experience driving remediation efforts across infrastructure, cloud, databases, middleware, network, and application environments. Experience managing executive-level reporting, KPIs, KRIs, compliance metrics, and remediation performance measurements. Knowledge of regulatory and security frameworks including NIST, CIS Controls, ISO 27001, FFIEC, PCI DSS, and other industry security standards. Experience supporting internal audit, regulatory examinations, control assessments, and technology risk management activities. Strong knowledge of ServiceNow Vulnerability Response, ITSM processes, and enterprise governance practices. Experience designing automation solutions and process improvements that enhance remediation efficiency and operational effectiveness. Proven ability to lead cross-functional initiatives involving cybersecurity, infrastructure engineering, technology operations, risk management, and audit stakeholders. Experience mentoring technical resources and providing subject matter expertise to engineering teams and leadership. Professional certifications preferred, such as CISSP, CISM, CRISC, Security+, CySA+, GSEC, ITIL, Qualys Certified Specialist, or equivalent. SunTrust Investment Services, Inc.